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f Server \ 
( Authenticates J 
\ Security Device / 



Get serial number 
from security ' 
device. 



Yes 



Get HKf K<7 
for serial number. 



Get time and date 
from clock/ 
calendar. ' 
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Compute expected 
response. 
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\ Authentication / 
V Challenge J 
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from security logic. 



Compute response 
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Expiration Datesy 



Get expiration date 
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database. 
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calendar. <* 
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Unlock security 
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Send encrypted 
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security device 
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device memory. 
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Server Unlocks 
Security Device 
\^ Memory 



Get serial number 
from the security 
device. 



Get nctAofy 
key from the user 
database. 



Get current time 
and date from the 
clock/calendar. 



Get the current 
cryptogram from 
the security 
device. 



Compute the 
unlock message 
and response . 
values. 



Send the memory 
unlock message to 
the security „ 
device. 
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server 
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and expiration ' 
date received from 
the server. 
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Store dates in non- 
volatile memory. 
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Send memory lock 
command to 
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Device 




Get date and time 
from dock/ 
calendar. 



Send date and 
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device. 
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Record expiration. 



Store date and 
time in non-volatile 
memory. 
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asset J 
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Get time and date 
from clock/ 
calendar. 



Generate 
encryption key. 



Encrypt asset/ 



Store encrypted 
}r\ database. 
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status from asset 
database. 



Get user Key 
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Encrypt asset key 
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using user 
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Send encrypted 
key and flag to 



Send enqrypted 
asset 4« 
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Application 
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Send encrypted 
asset key and 
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security device. 



Get response from 
security device. 



Extract asset key 

from security 
device response/ 



H>3<? 




Yes- 



Notify user that 
asset has expired. 
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Initialize 
decryption 
algorithm with 
asset key received 
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device. 
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Receive encrypted 
asset key and 
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Get user ^c/ 
from secure 
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Decrypt asset key 
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of subscription 
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